Change codec to HTML to prevent javascript injection
Add rules for password format to prevent code injection
Finalize verification logic and log in user after verification
Authentication-plugin fork taken in use